qubes-mirage-firewall/packet.ml

(* Copyright (C) 2015, Thomas Leonard <thomas.leonard@unikernel.com>
   See the README file for details. *)

open Utils

type port = int

type ports = {
  sport : port; (* Source port *)
  dport : port; (* Destination *)
}

type host = 
  [ `Client of client_link | `Unknown_client of Ipaddr.t | `Client_gateway | `Firewall_uplink | `NetVM | `External of Ipaddr.t ]

type info = {
  frame : Cstruct.t;
  src : host;
  dst : host;
  proto : [ `UDP of ports | `TCP of ports | `ICMP | `Unknown ];
}
Move NAT code to router and add DNS redirects 2015-12-30 11:07:16 -05:00			`(* Copyright (C) 2015, Thomas Leonard <thomas.leonard@unikernel.com>`
			`See the README file for details. *)`

			`open Utils`

			`type port = int`

			`type ports = {`
			`sport : port; (* Source port *)`
			`dport : port; (* Destination *)`
			`}`

			`type host =`
Rationalised firewall rules syntax Added explicit NAT target, allowing NAT even within client net and making it clear that NAT is used externally. Changed Redirect_to_netvm to NAT_to, and allow specifying any target host. 2016-01-01 06:32:57 -05:00			[ `Client of client_link \| `Unknown_client of Ipaddr.t \| `Client_gateway \| `Firewall_uplink \| `NetVM \| `External of Ipaddr.t ]
Move NAT code to router and add DNS redirects 2015-12-30 11:07:16 -05:00
			`type info = {`
			`frame : Cstruct.t;`
			`src : host;`
			`dst : host;`
			proto : [ `UDP of ports \| `TCP of ports \| `ICMP \| `Unknown ];
			`}`